CVE-2017-11429

Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to...

CVE-2017-11429

CVE-2017-11429 affects Clever saml2-js (versions 2.0 and earlier). The issue arises from incorrect handling of XML DOM traversal and canonicalization APIs, allowing a remote attacker to modify SAML content without invalidating the cryptographic signature, potentially bypassing authentication to S...

CVE-2017-11429 Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to...

Medtronic's Implantable Defibrillators Vulnerable to Life-Threatening Hacks

The U.S. Department of Homeland Security Thursday issued an advisory warning people of severe vulnerabilities in over a dozen heart defibrillators that could allow attackers to fully hijack them remotely, potentially putting lives of millions of patients at risk. Cardioverter Defibrillator is a...

clever-mediagroup.de XSS vulnerability

Open Bug Bounty ID: OBB-319025 Description| Value ---|--- Affected Website:| clever-mediagroup.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

An overview of TLS 1.3

I presented TLS 1.3 to the CloudFlare London office. Why it's faster, how it works, why it's safer, what's clever about it. The talk is recorded and comes with colored diagrams. There's a transcript on the CloudFlare blog. Update: you might want to watch my 33c3 talk on the same topic instead. An...

Clever Taxi - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Clever Taxi published at the 'play' market has multiple vulnerabilities...

Clever Blocks - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Clever Blocks published at the 'play' market has multiple vulnerabilities...

Clever Lotto Light - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Clever Lotto Light published at the 'play' market has multiple vulnerabilities...

Multiple Vulnerabilities in Clever Internet ActiveX Suite CLINetSuiteX6.OCX

ActiveX controls, formerly called OLE controls or OCX controls, are software components or objects that can be inserted into Web pages or other applications. An arbitrary file download and overwrite vulnerability exists in Clever Internet ActiveX Suite CLINetSuiteX6.OCX. The vulnerability could b...

Clever Copy 3.0 Connect.INC Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17461/info Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use this information t...

Clever Copy 2.0 Calendar.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14278/info A cross-site scripting vulnerability affects Clever Copy. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in dynamically generated Web pages. A...

Clever Copy 2.0 results.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14395/info Clever Copy is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues...

Clever Copy 3.0 Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27335/info Clever Copy is prone to multiple input-validation vulnerabilities, including two SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting...

Clever Copy 2.0 Private Message Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14397/info Clever Copy is affected by an unauthorized access vulnerability. This issue is due to a failure in the application to perform proper access validation checks before granting access to private message functions...

Clever Copy 2.0 categorysearch.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14395/info Clever Copy is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues...

Clever Copy 2.0/3.0 - Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16607/info Clever Copy is prone to multiple HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and scrip...

Clever Copy 3.0 - 'postview.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28437/info Clever Copy is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow PoC

No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/14/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------- bClever Database Comparer ActiveX version 2.2...

Ritim | Clever Content CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Ritim | Clever Content CSRF Author: Jonturk75 Vendor or Software Link: http://ritim.info/ Category:: webapps Demo : http://demo.ritim.info/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-04-01...